
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier: xb+E9N1amunR0F4Pb3WcvPhw9wfiutehzMvHJlHMxvw=
Subject key identifier: 0F:07:B0:BF:E9:80:6F:7E:97:7F:03:D6:6C:1C:18:95:A8:53:62:8F
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number: 023A
Signing time: Fri 17 Jul 2026 03:45:18 +0000
Manifest this update: Fri 17 Jul 2026 03:45:17 +0000
Manifest next update: Fri 24 Jul 2026 03:45:17 +0000
Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: tsAvElzoPp/D2UBRaBgmiuU8XYMR1oKqQ8KqwoH8mWk=)
2: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: GDl5mVu/aHI+hBuO6VNjgfJXS25xVSRkSRDDKqvvcrI=)
3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: o3DLj0A49CBn+DQBy0PkQcbscmEcGxRHaVNwUFP538g=)
4: 60C72042052911F0A2361C50C4F9AE02.roa (hash: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 03:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Validity
Not Before: Jul 17 03:45:17 2026 GMT
Not After : Jul 24 03:45:17 2026 GMT
Subject: CN=6a59a54e-8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:28:c2:bb:11:c6:ea:e5:01:a9:0f:26:7b:
52:88:62:f1:75:b1:fc:dc:23:e1:72:54:93:17:a6:
be:13:67:c4:fa:8a:e9:97:b6:85:0b:7e:4d:4f:6a:
45:38:8f:b4:ce:19:2f:22:34:4c:51:d6:30:db:97:
e1:ed:2d:15:ce:d3:22:af:fa:55:65:19:5d:10:13:
75:19:14:78:45:24:21:27:a5:4b:3e:71:a2:1c:d8:
84:bf:18:b2:77:95:cf:8d:13:cc:5a:59:2e:b9:b5:
10:a5:0c:63:02:dc:20:9f:73:8a:30:55:fd:51:23:
3e:61:a3:6e:c7:14:b0:b5:8c:e2:fd:20:24:2a:de:
da:6b:ee:54:a6:fb:8d:27:7c:14:cd:65:e6:38:ab:
e4:d1:f6:a7:3a:5b:0c:d3:c7:c5:a1:d8:b7:31:55:
ef:5e:bb:e8:e6:fe:b4:e9:ea:02:73:3b:25:0f:b4:
ea:55:28:ae:69:98:2e:e7:6b:71:9a:2f:33:72:0e:
db:6e:78:32:75:e0:d4:df:4a:74:65:8e:d1:bb:3a:
54:0d:3d:57:24:fd:72:c8:e0:cb:4b:6e:16:26:40:
2b:86:59:eb:cc:7a:fd:85:0b:1e:95:c3:67:c1:a7:
91:97:59:51:d6:18:bd:f1:81:44:df:00:63:17:2e:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:B0:BF:E9:80:6F:7E:97:7F:03:D6:6C:1C:18:95:A8:53:62:8F
X509v3 Authority Key Identifier:
keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:23:dd:5b:9d:9e:52:e4:8c:bf:3a:2c:36:16:61:14:6c:2a:
be:ac:59:f8:fb:ef:c5:93:42:89:9b:58:98:9d:ac:7c:2c:2d:
a5:c6:38:fb:b5:e3:e7:06:22:2c:6f:2b:36:9e:0c:ba:30:22:
2e:b1:2f:bc:4a:96:f2:b5:93:85:ca:6d:84:4b:d7:07:89:29:
a7:7e:6e:a6:73:f7:95:55:33:81:96:59:cd:c1:91:01:e2:69:
08:14:88:b6:d8:e8:3c:49:67:5b:d7:9e:2d:f2:22:40:8a:f4:
98:4d:7c:e3:87:b9:b3:bb:17:83:ca:70:73:27:bd:4a:bc:9a:
95:01:d1:80:2e:01:a0:cc:1d:fb:74:97:e9:9b:40:73:25:06:
a5:8f:df:c0:e6:9d:01:7d:62:f6:60:11:ae:3e:ef:97:0b:32:
3f:76:9e:cf:4e:6b:c3:8c:98:85:f1:c6:af:39:10:58:d3:b1:
57:da:29:69:89:75:f6:7c:01:9b:e4:6f:f5:07:78:ed:b0:ed:
5b:40:0d:db:1e:f9:bc:98:5e:d5:f1:6b:de:97:b8:b5:2c:9a:
09:ce:75:38:09:5e:c8:0b:8b:79:86:08:42:d7:16:8a:10:96:
d2:ec:d1:bc:dd:ca:65:d1:c3:e0:4a:fb:10:89:8c:95:88:01:
e3:30:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:10:04 2026 by rpki-client